General

  • Target

    NEAS.4133683572cb62e06e64c43a6dc2d570.exe

  • Size

    89KB

  • Sample

    231013-yztl8agf4s

  • MD5

    4133683572cb62e06e64c43a6dc2d570

  • SHA1

    e105eda7016f322a29ee946d5abffc0b18b1f4af

  • SHA256

    714d943dc2eef46c77f96c349eee97c4e481b27bc4ea2289833fa6326c93e53d

  • SHA512

    398b9a278c8eae902c97b5835ff22e24e78ac0298d1e656de17c2ad03f1bd26088e41316cecddb6fff9bff3668c8563336f65cf76e69f9ca71c131a7d913b058

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpa:AnBdOOtEvwDpj6zV

Score
7/10
upx

Malware Config

Targets

    • Target

      NEAS.4133683572cb62e06e64c43a6dc2d570.exe

    • Size

      89KB

    • MD5

      4133683572cb62e06e64c43a6dc2d570

    • SHA1

      e105eda7016f322a29ee946d5abffc0b18b1f4af

    • SHA256

      714d943dc2eef46c77f96c349eee97c4e481b27bc4ea2289833fa6326c93e53d

    • SHA512

      398b9a278c8eae902c97b5835ff22e24e78ac0298d1e656de17c2ad03f1bd26088e41316cecddb6fff9bff3668c8563336f65cf76e69f9ca71c131a7d913b058

    • SSDEEP

      1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpa:AnBdOOtEvwDpj6zV

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks